
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier: jbFQ064FHbyJImv7f6st8WxsefyuRiay13Wyz8UzJhY=
Subject key identifier: EA:06:65:5C:9D:89:FA:B4:80:F7:AD:73:67:94:72:C5:41:3B:6D:E1
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial: 0577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number: 0569
Signing time: Sat 18 Apr 2026 23:14:50 +0000
Manifest this update: Sat 18 Apr 2026 23:14:49 +0000
Manifest next update: Sat 25 Apr 2026 23:14:49 +0000
Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: q2eCh0qCgLdG/niDq/bT3AfqhcvDF5gmvij/xVJyk8k=)
2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: tZDhIMTLHb3NbSs7t7zGCwhDrXMR5MLwG/mByKSsB2E=)
3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Validity
Not Before: Apr 18 23:14:49 2026 GMT
Not After : Apr 25 23:14:49 2026 GMT
Subject: CN=69e4106a-715b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:3d:2a:08:ce:db:37:97:4b:4e:a0:84:9a:
fb:7c:62:75:70:af:8a:ff:ab:0a:ee:90:ca:dc:da:
20:25:89:77:aa:17:64:11:e9:79:b3:c3:24:f0:7f:
02:eb:7f:87:72:af:cd:f1:d8:96:24:09:65:86:f7:
71:cb:aa:4c:24:65:37:6b:45:47:f9:08:df:67:a9:
43:2d:4b:24:63:20:74:1f:51:f4:74:dd:4d:fe:69:
2e:ad:9c:18:74:3e:93:99:3e:9e:a6:cc:a6:5a:bd:
67:fc:00:07:4c:1d:f4:08:b8:d7:f0:62:29:f8:66:
5f:c5:39:f2:e1:0f:5e:f1:a9:d3:9f:a5:59:8e:4a:
25:da:e1:9e:f8:51:f2:a6:c8:c7:af:9a:76:8e:b3:
85:78:03:57:51:0e:d4:e9:35:5c:1a:98:ae:aa:78:
df:7b:2f:fb:9c:51:33:bb:87:11:54:e3:1f:14:c3:
6e:ba:7a:c8:46:b9:5e:10:72:39:06:51:36:28:28:
5f:ef:f7:05:4a:31:21:7f:64:7c:1f:53:40:11:dc:
35:62:6f:03:40:01:f3:76:9c:d0:67:18:18:29:3e:
17:3b:6f:d8:b5:c8:f0:54:1a:b2:ab:8c:ad:88:f5:
60:05:56:af:4f:85:11:c2:7a:4e:dc:ba:40:fb:71:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:65:5C:9D:89:FA:B4:80:F7:AD:73:67:94:72:C5:41:3B:6D:E1
X509v3 Authority Key Identifier:
keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:e2:8b:4c:41:26:07:1f:dc:2d:1f:52:5d:a6:32:0c:67:
ee:bd:f9:2a:d4:46:a3:85:06:fd:7e:b5:83:a7:bd:9d:92:da:
3d:cf:68:c6:6d:de:08:02:b9:6f:07:98:a5:77:0e:6f:71:d5:
6a:98:2f:59:83:4c:ab:29:11:b5:db:23:be:90:0e:f8:5f:54:
99:97:fd:c5:98:14:2e:c9:6d:97:61:b3:46:20:de:9b:ac:52:
ea:9e:95:23:3a:18:9e:3b:fe:c7:34:81:0a:58:41:b0:f3:41:
85:14:93:26:ed:68:ac:1e:33:fc:e9:da:cc:89:e0:1b:bd:12:
c5:88:73:bb:67:ef:e4:7b:e6:e7:c4:d0:0a:27:0c:08:b2:ee:
2b:a1:cd:d7:7b:fb:e0:29:bc:f9:d9:06:11:f5:c8:4f:db:43:
b9:de:63:3b:5c:4a:33:15:e9:34:c6:84:b3:23:e9:93:3b:8b:
5e:a0:2f:dd:14:f9:48:20:e6:99:b1:f7:a4:63:22:e7:be:71:
46:ba:7e:0f:7c:96:58:f5:38:6e:32:5d:44:27:72:de:16:a9:
1a:0f:5c:14:6f:a9:48:44:2c:11:d4:e5:b3:c9:10:56:86:82:
37:75:45:5d:71:a8:94:c2:1a:23:e7:cd:86:f7:c7:be:a6:15:
86:5a:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:07 2026 by rpki-client